Simple firewall for slackware

mlpa · 10-25-2012, 05:37 AM

Based on robby workman firewall script and some google search I write a small script that provides a basic firewall system for slackware.

I attach my script to this post rc.firewall.txt.
Just copy it to /etc/rc.d remove .txt from the script name and reboot.

Hope it helps some of you.

ReaperX7 · 10-25-2012, 09:28 PM

If you Google search AlienBOB's website he has an Easy Firewall Generator script builder most people use.

TommyC7 · 10-26-2012, 01:31 AM

Don't forget about ip6tables too if you have IPv6 enabled in the kernel.

mlpa · 10-26-2012, 03:32 AM

Quote:

Originally Posted by ReaperX7

If you Google search AlienBOB's website he has an Easy Firewall Generator script builder most people use.

Yes I also know that site

The idea is to give a lot of choices for slackware users.
They can decide what is more comfortable for them.

commandlinegamer · 10-26-2012, 06:01 AM

I use firehol which is fairly straightforward (I just couldn't be bothered spending any more time on the ins and outs of iptables), though I don't think there's been any updates recently, and you need to make sure you provide it with a correct list of reserved IPs as the inbuilt one is quite out of date.

firehol.sourceforge.net

irgunII · 10-26-2012, 09:36 AM

Shorewall is a good one too. Not too difficult to install if you simply read the instructions (if I can do it, anyone can...literally!).

http://www.shorewall.net/

basil_brush · 10-26-2012, 11:11 AM

In the Op's script IPT=$(which iptables) ...or even the command at bash prompt doesn't work? ..I use ALienBoB's firewall generator, but was curious why it doesn't work?
Using whereis iptables does?

Forget that...it does, don't know what I was doing wrong.

I now know, I wasn't root.

A question though, why does whereis work and not which work as user?

mrclisdue · 10-26-2012, 01:23 PM

Quote:

Originally Posted by basil_brush

...A question though, why does whereis work and not which work as user?

'which' searches the user's path for the first direct binary hit. iptables is in /usr/sbin/, which isn't in a normal user's path.

cheers,